Liang Yao

Adjunct Professor
Bank Examiner, Banking Information Technology

Faculty/Staff

Text book
Auditor’s Guide to IT Auditing, 2nd Edition, by Richard E. Cascarino (available online at TU library)
IT Auditing Using Controls to Protect Information Assets, 3rd Edition, by Mike Kegrerreis, Mike Schiller, and Chris Davis
ISACA Review Manual 27th Edition, Chapter One – Information System Audit Process
ISACA IT Auditing Framework (ITAF) 3rd Edition http://www.isaca.org/Knowledge-Center/Research/ResearchDeliverables/Pages/ITAF-3rd-Edition.aspx
IT Audit Programs: https://www.isaca.org/knowledge-center/research/pages/audit-assurance-programs.aspx?cid=1003563&appeal=pr
ISACA Journal Archives:

IT Audit Foundation:

IS Audit Basics: The Core of IT Auditing https://www.isaca.org/resources/isaca-journal/past-issues/2014/is-audit-basicsthe-core-of-it-auditing

IS Audit Basics: Innovation in the IT Audit Processhttps://www.isaca.org/resources/isaca-journal/issues/2018/volume-2/is-audit-basics-innovation-in-the-it-audit-process

Seven Tips for New IT Auditorhttps://www.isaca.org/resources/news-and-trends/isaca-now-blog/2017/seven-tips-for-new-it-auditors

IT Audit Planning:

IS Audit Basics: Developing the IT Audit Plan Using COBIT 2019https://www.isaca.org/resources/isaca-journal/issues/2019/volume-3/developing-the-it-audit-plan-using-cobit-2019

IS Audit Basics: Helping Auditees Prepare for an IS/IT Audit https://www.isaca.org/resources/isaca-journal/issues/2015/volume-4/is-audit-basics-helping-auditees-prepare-for-an-isit-audit

IT Risk Assessment:

IS Audit Basics: Elements of an IS/IT Audit Strategy, Part 1 https://www.isaca.org/resources/isaca-journal/issues/2016/volume-4/is-audit-basics-elements-of-an-isit-audit-strategy-part-1

IS Audit Basics: Elements of an IS/IT Audit Strategy, Part 2 https://www.isaca.org/resources/isaca-journal/issues/2016/volume-4/is-audit-basics-elements-of-an-isit-audit-strategy-part-2

IS Audit Basics: Auditing IS/IT Risk Management, Part 1https://www.isaca.org/resources/isaca-journal/issues/2016/volume-2/is-audit-basics-auditing-isit-risk-management-part-1

IS Audit Basics: Auditing IS/IT Risk Management, Part 2https://www.isaca.org/resources/isaca-journal/issues/2016/volume-3/is-audit-basics-auditing-isit-risk-management-part-2

IS Audit Basics: Auditing IS/IT Risk Management, Part 3https://www.isaca.org/resources/isaca-journal/issues/2016/volume-3/is-audit-basics-auditing-isit-risk-management-part-3

IT Audit Reporting:

IS Audit Basics: The Components of the IT Audit Reporthttps://www.isaca.org/resources/isaca-journal/issues/2020/volume-1/is-audit-basics-the-components-of-the-it-audit-report

IS Audit Basics: Enhancing the IT Audit Report Using COBIT 2019 https://www.isaca.org/resources/isaca-journal/issues/2020/volume-4/enhancing-the-it-audit-report-using-cobit-2019

IS Audit Basics: Providing Audit Committee Guidancehttps://www.isaca.org/resources/isaca-journal/issues/2019/volume-5/providing-audit-committee-guidance

Other

ISACA Whitepaper: A Global Look at IT Audit Best Practices (https://www.isaca.org/bookstore/bookstore-wht_papers-digital/whpgl free download for ISACA Members)

Inherent Risk in Adopting RPA and Opportunities for Internal Audit Departments

https://www.isaca.org/resources/isaca-journal/issues/2019/volume-6/inherent-risk-in-adopting-rpa-and-opportunities-for-internal-audit-departments

 

GTAG
Global Technology Audit Guide (GTAG) 3 – Continuous Auditing (available online for free downloading)

Global Technology Audit Guide (GTAG) 4 – Management of IT Auditing (available online for free downloading)

Global Technology Audit Guide (GTAG) 11 – Developing the IT Audit Plan (available online for free downloading)

Global Technology Audit Guide (GTAG) 16 –  Data Analysis Technologies

 

Case Study
Arthur Andersen Case

SocieteGeneraleATheRogueTrader

Liberty Bell Hospital

TBD – HBP Course Pack link

Mis.
Gartner Articles

Contact Information

liang.yao@templ.edu

    Skip to toolbar